Function WhatSoftwareHTTP

decoder/stream/software/software.go:355–590

WhatSoftwareHTTP TODO: pass in the device profile.

(flowIdent string, h *types.HTTP)

// WhatSoftwareHTTP TODO: pass in the device profile.
func WhatSoftwareHTTP(flowIdent string, h *types.HTTP) (s []*AtomicSoftware) {
	// Get community ID from the HTTP record for correlation
	communityID := h.CommunityID

	// HTTP User Agents
	if h.UserAgent != "" && h.UserAgent != " " {

		UserAgentParserMutex.Lock()

		userInfo, ok := UserAgentCache[h.UserAgent]
		if !ok {
			userInfo = ParseUserAgent(h.UserAgent)
			if userInfo != nil {
				UserAgentCache[h.UserAgent] = userInfo
				softwareLog.Debug("UserAgent:", zap.String("userInfo", userInfo.Full))
			}
		}

		UserAgentParserMutex.Unlock()

		if userInfo != nil {
			if userInfo.Product != "" || userInfo.Vendor != "" || userInfo.Version != "" {
				var communityIDs []string
				if communityID != "" {
					communityIDs = []string{communityID}
				}
				s = append(s, &AtomicSoftware{
					Software: &types.Software{
						Timestamp: h.Timestamp,
						Product:   userInfo.Product,
						Vendor:    userInfo.Vendor,
						Version:   userInfo.Version,
						// DeviceProfiles: []string{dpIdent},
						SourceName:   "UserAgent",
						SourceData:   h.UserAgent,
						Service:      "HTTP",
						Flows:        []string{flowIdent},
						Notes:        userInfo.Full,
						OS:           userInfo.OS,
						CommunityIDs: communityIDs,
					},
				})
			}
		}
	}

	// HTTP Server Name
	if h.ServerName != "" && h.ServerName != " " {
		values := regExpServerName.FindStringSubmatch(h.ServerName)

		var communityIDs []string
		if communityID != "" {
			communityIDs = []string{communityID}
		}
		s = append(s, &AtomicSoftware{
			Software: &types.Software{
				Timestamp: h.Timestamp,
				Product:   values[1], // Name of the server (Apache, Nginx, ...)